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DETAILED ACTION 



Response to Amendment 

1 , This action is in response to the amendment filed on May 1 2, 2005. Claims 1 -1 6 
were received for consideration. Per the received amendment, claim 1 was amended. 
Claims 11-12 were cancelled per a preliminary amendment prior to the first action. 
Claims 1-10, and 13-16 are currently being considered. 



Response to Arguments 

2. Applicant's arguments filed on May 12, 2005 have been fully considered but they 
are not persuasive for the following reasons: 

Regarding claim 1 , the applicant argues that the CPA, Leppek (U.S. Patent No. 
5,933,501), does not teach "other manipulating means that are derived from said first 
manipulating means." This argument is not found persuasive. The system of Leppek 
can use any different encryption mechanisms to encrypt the data such as "PEP, DES, 
etc" (column 4 lines 1 5-17). It is interpreted that this non-limiting example could contain 
DES in the first sequence, and triple DES in another sequence, or the improved DES 
method of Kocher (U.S. Patent No. 6,278,783). As Kocher states, triple DES is a cipher 
constructed using three application of DES (column 1 lines 46-55). Therefore, triple 
DES and other variations of DES are derived from DES, and it is interpreted that the 
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CPA (Leppek) does teach "other manipulating means that are derived from said first 
manipulating means." Furthermore, the applicant argues that the CPA does not teach 
"by complementation of at least one of said input data and said output data." This 
argument is not found persuasive, Kocher teaches a method of using DES to minimize 
information leakage using smart cards and other cryptosystems, and discloses the 
"complementation of data" (column 6 lines 29-63, column 9 lines 5-23), where the 
complements are taken to prevent different sources of information leakage such as 
"observation of the pov\/er consumption and/or timing can reveal whether the carried bit 
in each round equal zero or one" (column 5 lines 8-15). The permutation arrays in 
Kocher are manipulated by using complement functions on the random permutations 
(column 6 lines 38-64). The reasons of combination of Kocher and Leppek are given in 
the previous Office action. Furthermore, regarding claim 13, the applicant argues that 
the CPA does not teach using a "random value for selecting the manipulating means to 
be employed." This argument is not found persuasive. Leppek discloses a generation 
of an random access code sequence to call up one of the different data encryption 
operators to produce a sequence of data encryption operators (column 2 lines 24-38). 
This sequence is a random value, and it selects which manipulating means are to be 
used. Therefore, it is believed that the CPA teaches using a "random value for selecting 
the manipulating means to be employed." 

Therefore the rejection is maintained for the pending claims 1-10, and 13-16 as 
given below. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1 -10, 13-16are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Leppek (U.S. Patent No. 5,933,501 ) in view of Kocher et al. (U.S. Patent No. 
6,278,783). 

Regarding claim 1, Leppek discloses: 

A countermeasure method against attacks by differential analysis of current 
consumption in an electronic component using a cryptographic algorithm having a 
secret key, comprising the following steps: 

"executing a first set of instructions in the algoritlim that are critical to said 
attacks with a first manipulating means to deliver output data on the basis of 
input data" (Figure 2, column 4 lines 7-51), wherein at least two different sequences of 
encryption operators are selected to encrypt the data; 

"executing another set of said critical instructions with other manipulating 
means that are derived from said first manipulating means" (Figure 2, column 4 
lines 7-51). Leppek does not explicitly disclose that this manipulating means is by 
' complementation of at least one of the input data and said output data, so that 
the output data and the data derived from said output data are unpredictable." 
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Kocher teaches a method of using DES to minimize information leak using smart cards 
and other cryptosystems, and discloses the ' complementation of data" (column 6 lines 
29-63, column 9 lines 5-23), where the complements are taken to prevent different 
sources of information leakage such as "observation of the power consumption and/or 
timing can reveal whether the carried bit in each round equal zero or one" (column 5 
lines 8-15), Leppek and Kocher are analogous arts in that both are concerned with 
providing cryptosystems that take measures to make data more unpredictable than 
using common encryption procedures. Leppek uses a series of encryption operators 
with a randomized order to obscure the encryption footprint, which exists, by using a 
particular encryption algorithm. Leppek stats "the encryption routines. ..need not be any 
particular type of encryption algorithm and may be conventional encryption operators, 
such as, PGP, DES, etc." Therefore it is obvious the modified DES presented by 
Kocher could be implemented in the encryption scheme of Leppek to prevent the 
possibility that "observation of the power consumption and/or timing can reveal whether 
the carried bits in each round equal zero or one, revealing some or all of the key bits" 
(Kocher column 5 lines 7-15). Therefore it would have been obvious to one of 
ordinary skill in the art to combine the encryption operator of Kocher with the encryption 
scheme of Leppek in order to use an encryption operator in the sequence which 
prevents the usefulness of an attack which observes the power consumption and/or 
timing to determine whether the carried bits are zeroes or ones, which reveals the bits 
of the key. 
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Claim 2 is rejected as applied above in rejecting claim 1 . Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 1 , wherein said ' first and other 
manipulating means are selected for use on the basis of one-half probability 
statistical relationship" (column 4 lines 33-52), wherein in the simplest form, there are 
two different sequences of operators that can be selected randomly equating to a fifty 
percent probability that either sequence will be chosen. 

Claim 3 is rejected as applied above in rejecting claim 2. Furthermore, Leppek 
discloses a countermeasure method according to claim 2, wherein said 'method 
comprises executing a first sequence and a second sequence, such that the 
order in which the sequences are executed is a function of the one-half 
probability statistical relationship" (Figure 2, column 4 lines 7-52), wherein there are 
two different sequence of operators that can be selected randomly. Leppek does not 
explicitly disclose any particular encryption algorithm but states that they "need not be 
any particular type of encryption algorithm" (column 4 lines 10-17). Kocher discloses 
the use of a modified DES encryption algorithm which consists of sixteen rounds (Figure 
1 ), which can then incorporated in the different sequences of Leppek to produce an 
encrypted stream. Leppek and Kocher are analogous arts in that both are concerned 
with providing cryptosystems that take measures to make data more unpredictable than 
using common encryption procedures, Leppek uses a series of encryption operators 
with a randomized order to obscure the encryption footprint, which exists, by using a 
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particular encryption algorithm. Leppek stats "the encryption routines... need not be any 
particular type of encryption algorithm and may be conventional encryption operators, 
such as, PGP, DES, etc." Therefore it is obvious the modified DES presented by 
Kocher could be implemented in the encryption scheme of Leppek to prevent the 
possibility that "observation of the power consumption and/or timing can reveal whether 
the carried bits in each round equal zero or one, revealing some or all of the key bits" 
(Kocher column 5 lines 7-15). Therefore it would have been obvious to one of 
ordinary skill in the art to combine the encryption operator of Kocher with the encryption 
scheme of Leppek in order to use an encryption operator in the sequence which 
prevents the usefulness of an attack which observes the power consumption and/or 
timing to determine whether the carried bits are zeroes or ones, which reveals the bits 
of the key. 

Claim 4 is rejected as applied above in rejecting claim 3. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 3, wherein "each of the first and 
second sequences is made up of the first three rounds" (column 4 lines 10-23), 
wherein the encryption operators can be of any type including DES, and further, can 
include any number of rounds that are in each of the respective encryption operators. 

Claim 5 is rejected as applied above in rejecting claim 3. Furthermore, Leppek 
discloses: 
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A countermeasure method according to claim 3. Leppek does not explicitly state 
"other manipulating means consist of second means such that, for the same 
input data, the complement of the output data of the first manipulating means is 
produced as output data." Kocher teaches a method of using DES to minimize 
information leak using smart cards and other cryptosystems, and discloses the 
"complementation of the output data" (column 6 lines 29-63, column 9 lines 5-23), 
where the complements are taken to prevent different sources of information leakage 
such as "observation of the power consumption and/or timing can reveal whether the 
carried bit in each round equal zero or one" (column 5 lines 8-1 5). This complementing 
of data, complements the data either at the beginning or the end, thus producing a 
complemented output data stream (column 9 lines 5-23). Leppek and Kocher are 
analogous arts in that both are concerned with providing cryptosystems that take 
measures to make data more unpredictable than using common encryption procedures. 
Leppek uses a series of encryption operators with a randomized order to obscure the 
encryption footprint, which exists, by using a particular encryption algorithm. Leppek 
stats "the encryption routines... need not be any particular type of encryption algorithm 
and may be conventional encryption operators, such as, PGP, DES, etc." Therefore it is 
obvious the modified DES presented by Kocher could be implemented in the encryption 
scheme of Leppek to prevent the possibility that "observation of the power consumption 
and/or timing can reveal whether the carried bits in each round equal zero or one, 
revealing some or all of the key bits" (Kocher column 5 lines 7-15). Therefore it would 
have been obvious to one of ordinary skill in the art to combine the encryption operator 
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of Kocher with the encryption scheme of Leppek in order to use an encryption operator 
in the sequence which prevents the usefulness of an attack which observes the power 
consumption and/or timing to determine whether the carried bits are zeroes or ones, 
which reveals the bits of the key. 

Claim 6 is rejected as applied above in rejecting claim 2. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 2, wherein said "method 
comprises executing a first sequence and a second sequence, such that the 
order in which the sequences are executed is a function of the one-half 
probability statistical relationship" (Figure 2, column 4 lines 7-52), wherein there are 
two different sequence of operators that can be selected randomly. Leppek does not 
explicitly disclose any particular encryption algorithm but states that they "need not be 
any particular type of encryption algorithm" (column 4 lines 10-17). Kocher discloses 
the use of a modified DES encryption algorithm which consists of sixteen rounds (Figure 
1 ), which can then incorporated in the different sequences of Leppek to produce an 
encrypted stream. Leppek and Kocher are analogous arts in that both are concerned 
with providing cryptosystems that take measures to make data more unpredictable than 
using common encryption procedures. Leppek uses a series of encryption operators 
with a randomized order to obscure the encryption footprint, which exists, by using a 
particular encryption algorithm. Leppek stats "the encryption routines... need not be any 
particular type of encryption algorithm and may be conventional encryption operators. 
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such as, PGP, DES, etc." Therefore it is obvious the modified DES presented by 
Kocher could be implemented in the encryption scheme of Leppek to prevent the 
possibility that "observation of the power consumption and/or timing can reveal whether 
the carried bits in each round equal zero or one, revealing some or all of the key bits" 
(Kocher column 5 lines 7-15). Therefore it would have been obvious to one of 
ordinary skill in the art to combine the encryption operator of Kocher with the encryption 
scheme of Leppek in order to use an encryption operator in the sequence which 
prevents the usefulness of an attack which observes the power consumption and/or 
timing to determine whether the carried bits are zeroes or ones, which reveals the bits 
of the key. 

Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 6, wherein ' each of the first and 
second sequences is made up of the last three rounds" (column 4 lines 10-23), 
wherein the encryption operators can be of any type including DES, and further, can 
include any number of rounds that are in each of the respective encryption operators; 
and 

"wherein the other manipulating means used in the second sequence 
comprise second manipulating means and a third manipulating means" (column 4 
lines 10-23), wherein there can be a number of different encryption operators in each 
sequence, which each include different means for changing (manipulating) the data. 
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Claim 8 is rejected as applied above in rejecting claim 7. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 7, wherein "said second 
manipulating means are used in the second sequence for the fourteenth round' 

(column 4 lines 10-23), wherein the encryption operators can be of any type including 
DES, and further, can include any manipulation in any of the rounds, including the 
fourteenth round of the respective encryption operation. Leppek does not explicitly 
disclose ''second manipulating means are such that, for the same input data, the 
complement of the output data of the first manipulating means is produced as 
output data" Kocher teaches a method of using DES to minimize information leak 
using smart cards and other cryptosystems, and discloses the ' complementation of 
the output data" (column 6 lines 29-63, column 9- lines 5-23), where the complements 
are taken to prevent different sources of information leakage such as "observation of the 
power consumption and/or timing can reveal whether the carried bit in each round equal 
zero or one" (column 5 lines 8-15). This complementing of data, complements the data 
either at the beginning or the end, thus producing a complemented output data stream 
(column 9 lines 5-23). Leppek and Kocher are analogous arts in that both are 
concerned with providing cryptosystems that take measures to make data more 
unpredictable than using common encryption procedures. Leppek uses a series of 
encryption operators with a randomized order to obscure the encryption footprint, which 
exists, by using a particular encryption algorithm. Leppek stats "the encryption 
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routines... need not be any particular type of encryption algorithm and may be 
conventional encryption operators, such as, PGP, DES, etc." Therefore it is obvious the 
modified DES presented by Kocher could be implemented in the encryption scheme of 
Leppek to prevent the possibility that "observation of the power consumption and/or 
timing can reveal whether the carried bits in each round equal zero or one, revealing 
some or all of the key bits" (Kocher column 5 lines 7-15). Therefore it would have 
been obvious to one of ordinary skill in the art to combine the encryption operator of 
Kocher with the encryption scheme of Leppek in order to use an encryption operator in 
the sequence which prevents the usefulness of an attack which observes the power 
consumption and/or timing to determine whether the carried bits are zeroes or ones, 
which reveals the bits of the key. 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 8, wherein "said third manipulating 
means are used in the second sequence for the fifteenth and the sixteenth round" 
(column 4 lines 10-23), wherein the encryption operators can be of any type including 
DES, and further, can include any manipulation in any of the rounds, including the 
fourteenth round of the respective encryption operation. Leppek does not explicitly 
disclose "second manipulating means are such that, for the same input data, the 
complement of the output data of the first manipulating means is produced as 
output data" Kocher teaches a method of using DES to minimize information leak 
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using smart cards and other cryptosystems, and discloses the ' complementation of 
the output data" (column 6 lines 29-63, column 9 lines 5-23), where the complements 
are taken to prevent different sources of information leakage such as "observation of the 
power consumption and/or timing can reveal whether the carried bit in each round equal 
zero or one" (column 5 lines 8-15). This complementing of data, complements the data 
either at the beginning or the end, thus producing a complemented output data stream 
(column 9 lines 5-23). Leppek and Kocher are analogous arts in that both are 
concerned with providing cryptosystems that take measures to make data more 
unpredictable than using common encryption procedures. Leppek uses a series of 
encryption operators with a randomized order to obscure the encryption footprint, which 
exists, by using a particular encryption algorithm. Leppek stats "the encryption 
routines... need not be any particular type of encryption algorithm and may be 
conventional encryption operators, such as, PGP, DES, etc." Therefore it is obvious the 
modified DES presented by Kocher could be implemented in the encryption scheme of 
Leppek to prevent the possibility that "observation of the power consumption and/or 
timing can reveal whether the carried bits' in each round equal zero or one, revealing 
some or all of the key bits" (Kocher column 5 lines 7-15). Therefore it would have 
been obvious to one of ordinary skill in the art to combine the encryption operator of 
Kocher with the encryption scheme of Leppek in order to use an encryption operator in 
the sequence which prevents the usefulness of an attack which observes the power 
consumption and/or timing to determine whether the carried bits are zeroes or ones, 
which reveals the bits of the key. 
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Claim 10 is rejected as applied above in rejecting claim 1 . Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 1 . Leppek does not explicitly 
disclose 'manipulating means are constants tables." Kocher teaches the use of 
tables to manipulate data (column 7 lines 15-65), wherein the tables are used as a 
method to minimize information leakage when using a electric component such as a 
smart card. The tables are filled with parameters (constants), which are preferably 
updated so that attackers cannot obtain the contents of the table by analysis of 
measurements. The Leppek and Kocher are analogous arts in that both are concerned 
with providing cryptosystems that take measures to make data more unpredictable than 
using common encryption procedures. Leppek uses a series of encryption operators 
with a randomized order to obscure the encryption footprint, which exists, by using a 
particular encryption algorithm. Leppek stats "the encryption routines,., need not be any 
particular type of encryption algorithm and may be conventional encryption operators, 
such as, PGP, DES, etc." Therefore it is obvious the modified DES presented by 
Kocher could be implemented in the encryption scheme of Leppek to prevent the 
possibility that "table lookup operations leak information about the address of the 
memory lookup and the value that is returned" (Kocher column 5 lines 30-41). 
Therefore it would have been obvious to one of ordinary skill in the art to combine the 
encryption operator of Kocher with the encryption scheme of Leppek in order to use an 
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encryption operator in the sequence, which prevents the table lookup from leaking 
information about the address of the memory lookup and the returned value. 

Claim 16 is rejected as applied in rejecting claim 13. Furthermore, Leppek discloses: 

The electric component of claim 1 3. Leppek does not explicitly disclose that the 
countermeasure method is implemented on a "smart card". Kocher discloses that the 
technique of improving the DES against external monitoring attacks is "implementable in 
cryptographic smartcards" (Abstract). The encryption scheme of Leppek is used to 
encrypt data communications, which is analogous to the purpose of the invention of 
Kocher, who aims to more securely perform cryptographic processing. It is well-known 
in the art to use smart cards to carry and send data, because they are portable and can 
be associated with one user. Therefore it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to implement the encryption scheme 
of Leppek on a smart card as disclosed by Kocher to secure (encrypt) the data being 
processed on the smart card to prevent attackers from obtaining secret information. 
The implementation of the encryption scheme of Leppek on the smart card would allow 
information to be portable and allow the processing of that information to be secure. 

Regarding claim 13, Leppek discloses: 

An electronic component which provides countermeasures against attacks on a 
secret key cryptographic algorithm, comprising: 
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"a program memory having stored therein a plurality of different 
manipulating means for producing output data in response to input data" (column 
2 lines 6-38); 

"a processor which executes instructions in said algorithm that are critical 
to said attacks, in accordance with a selected one of said manipulating means" 

(Figure 2, column 4 lines 7-51); and 

"means for generating a random value for selecting the manipulating 
means to be employed during a given execution of said algorithm, such that 
output data produced thereby is unpredictable" (column 2 lines 24-38), wherein a 
generation of an random access code sequence is used to call up one of the different 
data encryption operators to produce a sequence of data encryption operators (column 
2 lines 24-38). 

Claim 14 is rejected as applied above in rejecting claim 13. Furthermore, Leppek 
discloses: 

A countermeasure method according to claim 13. Leppek does not explicitly 
disclose 'manipulating means are constants tables." Kocher teaches the use of 
tables to manipulate data (column 7 lines 15-65), wherein the tables are used as a 
method to minimize information leakage when using a electric component such as a 
smart card. The tables are filled with parameters (constants), which are preferably 
updated so that attackers cannot obtain the contents of the table by analysis of 
measurements. The Leppek and Kocher are analogous arts in that both are concerned 



Application/Control Number: 09/807,607 Page 17 

Art Unit: 2131 

with providing cryptosystems that take measures to make data more unpredictable than 
using common encryption procedures. Leppek uses a series of encryption operators 
with a randomized order to obscure the encryption footprint, which exists, by using a 
particular encryption algorithm. Leppek stats "the encryption routines... need not be any 
particular type of encryption algorithm and may be conventional encryption operators, 
such as, PGP, DES, etc." Therefore it is obvious the modified DES presented by 
Kocher could be implemented in the encryption scheme of Leppek to prevent the 
possibility that "table lookup operations leak information about the address of the 
memory lookup and the value that is returned" (Kocher column 5 lines 30 - 41). 
Therefore it would have been obvious to one of ordinary skill in the art to combine the 
encryption operator of Kocher with the encryption scheme of Leppek in order to use an 
encryption operator in the sequence, which prevents the table lookup from leaking 
information about the address of the memory lookup and the returned value. 

Claim 15 is rejected as applied above in rejecting claim 13. Furthermore, Leppek 
discloses: 

The electronic component of claim 13. Kocher teaches a method of using DES 
to minimize information leak using smart cards and other cryptosystems, and discloses 
the "complementation of the output data" (column 6 lines 29-63, column 9 lines 5- 
23), where the complements are taken to prevent different sources of information 
leakage such as "observation of the power consumption and/or timing can reveal 
whether the carried bit in each round equal zero or one" (column 5 lines 8-15). This 
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complementing of data, complements the data either at the beginning or the end, thus 
producing a complemented output data stream (column 9 lines 5-23). Leppek and 
Kocher are analogous arts in that both are concerned with providing cryptosystems that 
take measures to make data more unpredictable than using common encryption 
procedures. Leppek uses a series of encryption operators with a randomized order to 
obscure the encryption footprint, which exists, by using a particular encryption 
algorithm. Leppek stats "the encryption routines. ..need not be any particular type of 
encryption algorithm and may be conventional encryption operators, such as, PGP, 
DES, etc." Therefore it is obvious the modified DES presented by Kocher could be 
implemented in the encryption scheme of Leppek to prevent the possibility that 
"observation of the power consumption and/or timing can reveal whether the carried bits 
in each round equal zero or one, revealing some or all of the key bits" (Kocher column 5 
lines 7-15). Therefore it would have been obvious to one of ordinary skill in the art to 
combine the encryption operator of Kocher with the encryption scheme of Leppek in 
order to use an encryption operator in the sequence which prevents the usefulness of 
an attack which observes the power consumption and/or timing to determine whether 
the carried bits are zeroes or ones, which reveals the bits of the key. 
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Conclusion 

THIS ACTION IS MADE FINAL Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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